2.7.0

What's Changed

• Resolve SonarCloud findings on main (#340) (#344) @timlaing
• fix(photos): port uploads to Apple's photosupload endpoint (#331) @MrJarnould, @claude, @timlaing
• fix(reminders): request PCS access so encrypted fields decode (#317) @FezVrasta, @claude, @timlaing
• fix: raise PyiCloudPCSTimeoutException when PCS retries are exhausted (#343) @timlaing
• fix(notes): request PCS access so encrypted fields decode (#318) @FezVrasta, @claude, @timlaing
• feat(cli): add `icloud doctor` for read-only service diagnostics (#336) @MrJarnould, @claude, @timlaing
• fix: report an advertised webservice with no url as unavailable (#337) @MrJarnould, @claude, @timlaing
• fix(invites): read the shared scope zone by zone (#339) @MrJarnould, @claude, @timlaing
• feat: add an inventory of the webservices the library depends on (#335) @MrJarnould, @claude, @timlaing
• feat: identify withdrawn endpoints instead of a generic response error (#334) @MrJarnould, @claude
• fix: refresh webservices after token authentication (#332) @MrJarnould, @claude, @timlaing
• Refactor setup/startup scripts: set -e + pipefail, opt-in trace (#327) @timlaing
• fix(calendar): parse Apple's date arrays into datetimes (#320) @FezVrasta, @claude, @timlaing
• feat(reminders): expose `deleted` on RemindersList (#319) @FezVrasta, @claude, @timlaing
• feat: make family device polling delay and max retries configurable (#326) @timlaing
• feat: support minimal (paused) 2FA auth for Find My operations (#325) @timlaing
• ci: fix SonarQube PR analysis via workflow_run pattern (#324) @timlaing
• fix: handle Apple authenticationType key in 409 2FA responses (#323) @timlaing
• fix(hsa2): handle nested JSON boot context and auth-state wipe during SRP 2FA (#322) @timlaing
• fix(reminders): declare CRDT lengths in UTF-16 code units, not codepoints (#304) @YoraiLevi
• Fix China mainland auth endpoints and 2FA fallback (#285) @hackermengzhi, Cherry
• Adjust Dependabot pip updates to only widen requirements when needed (#291) @copilot-swe-agent[bot], @Copilot

🚀 Features

• chore: strict-mode cleanup (mypy/pylint) with SonarQube noqa suppressions (#321) @timlaing

⬆️ Dependencies

• build(deps): bump actions/checkout from 4 to 7 (#329) @dependabot[bot]
• build(deps): bump actions/setup-node from 4 to 7 (#328) @dependabot[bot]
• build(deps): bump actions/setup-python from 5 to 7 (#330) @dependabot[bot]
• build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.8 (#314) @dependabot[bot]
• build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.8 (#315) @dependabot[bot]
• build(deps): bump actions/setup-python from 6 to 7 (#299) @dependabot[bot]
• build(deps-dev): update setuptools requirement from <82.1,>=77.0 to >=77.0,<84.1 (#309) @dependabot[bot]
• build(deps): update ruff requirement from >=0.15.17 to >=0.15.20 (#287) @dependabot[bot]
• build(deps): bump ghcr.io/devcontainers/features/docker-in-docker from 3.1.0 to 4.0.0 (#286) @dependabot[bot]
• build(deps): update ruff requirement from >=0.15.15 to >=0.15.17 (#280) @dependabot[bot]
• build(deps): bump actions/checkout from 6 to 7 (#284) @dependabot[bot]

Contributors

@FezVrasta, @hackermengzhi, @MrJarnould, @timlaing, @YoraiLevi, @copilot-swe-agent[bot], @dependabot[bot], Cherry, @claude and @Copilot